Change Guardian monitors the Dell EMC file systems on Isilon and Unity storage platforms. This section provides information about the following.
Figure 5-3 Dell EMC Monitoring using Change Guardian
The deployment diagram illustrates the following:
Dell EMC CEE collects events from the Dell EMC machine. For more information about Dell EMC CEE, see Using the Common Event Enabler for Windows
in the Dell EMC website.
SmartConnector for Change Guardian acts as the interface between Dell EMC and Change Guardian. It pulls event data from Dell EMC CEE and stores the event details in a CEF log file.
Change Guardian Agent for Windows reads from the CEF log file and sends the event details to the Change Guardian server.
Complete the following tasks to monitor Dell EMC:
Task |
See |
---|---|
Complete the prerequisites |
|
Add a license key |
|
Configure Change Guardian for Dell EMC monitoring |
|
Triage events |
Ensure that you have completed the following:
Install SmartConnector for Change Guardian
Install SmartConnector for Change Guardian and Dell EMC Common Event Enabler (CEE) on the same machine.
Install Change Guardian Agent for Windows
Install Change Guardian Agent for Windows on the same machine where you installed SmartConnector for Change Guardian.
Complete the following procedures to configure Change Guardian to monitor Dell EMC events:
You must configure Change Guardian server and SmartConnector for Change Guardian to receive Dell EMC event logs.
Prerequisites Ensure that you have added Dell EMC asset in Agent Manager.
To enable monitoring:
In Agent Manager, select the asset and click Manage Installations > Reconfigure Agents.
In the Reconfigure Agents page, edit the configuration to select Enable Smart Connector Plugin.
Specify the location to store CEF events in CEF Data Output Path.
NOTE:Ensure that the value in CEF Data Output Path matches the CEF data path that you had specified during SmartConnector for Change Guardian installation. You can get the CEF data path from ceffolder parameter in the <install_directory>\current\user\agent\agent.properties.
You can create file system policies to generate events about files and directories when they are created, deleted, renamed, permission changed, and so on.
While creating file system policies, specify the EMC shared path in the following format: \\hostname\device type identifier\local sub folder.
For example for Isilon specify \\onefs8104-1\onefs$\ifs\<local sub directory>, and for Unity specify \\onefs8104-1\CHECK$\ifs\<local sub directory>. Here \\onefs8104-1 is the host name and \ifs\<local sub directory> is the directory you want to monitor.
NOTE:It is recommended to monitor the file system of Dell EMC Unity storage. For example, specify the path as \\Unity-1\CHECK$\LocalFS in Policy Editor, where LocalFS is the Dell EMC Unity file system name.
For information about creating policies, see Creating Change Guardian Policies.
After creating policies, you can assign them to assets. For information about assigning policies, see Working with Policies.